Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/b67eb7-e496-4c31-9f67-97902d8a7fa6/1/POoeZ9JcIrFPhJTeWPU8jpK_vAc.roa
File: POoeZ9JcIrFPhJTeWPU8jpK_vAc.roa (raw, json)
Hash identifier: ToulLGENoP/7yn7Jgz/qlwSorKjiORy0BAk4ycS9VNQ=
Subject key identifier: 3C:EA:1E:67:D2:5C:22:B1:4F:84:94:DE:58:F5:3C:8E:92:BF:BC:07
Certificate issuer: /CN=84bbaeb70b3f1d06716358ad9a2ecfef7d2126fb
Certificate serial: 019428262E7B23090CF343B569F36FE536ED
Authority key identifier: 84:BB:AE:B7:0B:3F:1D:06:71:63:58:AD:9A:2E:CF:EF:7D:21:26:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLuutws_HQZxY1itmi7P730hJvs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/b67eb7-e496-4c31-9f67-97902d8a7fa6/1/POoeZ9JcIrFPhJTeWPU8jpK_vAc.roa
Signing time: Thu 02 Jan 2025 17:52:58 +0000
ROA not before: Thu 02 Jan 2025 17:52:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203576
IP address blocks: 185.179.24.0/24 maxlen: 24
185.179.25.0/24 maxlen: 24
185.179.26.0/24 maxlen: 24
185.179.27.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:2e:7b:23:09:0c:f3:43:b5:69:f3:6f:e5:36:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84bbaeb70b3f1d06716358ad9a2ecfef7d2126fb
Validity
Not Before: Jan 2 17:52:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3cea1e67d25c22b14f8494de58f53c8e92bfbc07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c4:3e:16:67:6f:eb:7b:7e:01:90:66:d7:08:
14:95:17:74:0e:c3:3b:c2:a2:13:7c:cd:ee:f1:ed:
31:33:15:42:c2:64:56:34:82:6c:95:53:6a:6d:86:
cf:a5:51:e2:3d:8e:f3:e1:e2:24:6b:80:2f:9a:57:
f9:b2:31:98:e3:c7:50:48:85:cd:de:f1:e1:29:3f:
8d:4e:15:96:22:3c:c0:04:29:00:36:98:7f:3b:f3:
5a:8e:c8:2e:91:77:c5:77:a0:54:0b:af:82:83:a4:
ca:50:a7:71:48:23:ea:56:7e:0d:f1:c9:89:4e:f1:
36:e2:1a:9e:6e:5e:f7:a2:df:54:ef:b0:fb:de:60:
83:4e:1b:7a:30:0d:c3:8f:a9:ec:e1:fe:90:9b:1c:
81:59:56:64:00:85:85:aa:95:85:9a:f8:78:d2:99:
1c:ca:64:77:e4:5e:ce:de:a4:9b:8f:7e:7a:25:e0:
ab:77:34:c0:71:39:b4:29:3e:f9:43:27:51:c9:fa:
d7:7f:07:6f:0e:42:61:db:78:b3:a8:bb:42:cc:b4:
41:f4:00:41:da:c8:92:3e:42:99:cb:fa:da:01:bb:
ff:f8:fc:39:be:2e:d7:64:de:08:88:15:8b:a7:96:
08:29:97:5a:2b:f2:81:ea:2d:57:72:30:b1:d0:6c:
aa:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:EA:1E:67:D2:5C:22:B1:4F:84:94:DE:58:F5:3C:8E:92:BF:BC:07
X509v3 Authority Key Identifier:
keyid:84:BB:AE:B7:0B:3F:1D:06:71:63:58:AD:9A:2E:CF:EF:7D:21:26:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLuutws_HQZxY1itmi7P730hJvs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b67eb7-e496-4c31-9f67-97902d8a7fa6/1/POoeZ9JcIrFPhJTeWPU8jpK_vAc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b67eb7-e496-4c31-9f67-97902d8a7fa6/1/hLuutws_HQZxY1itmi7P730hJvs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.179.24.0/22
Signature Algorithm: sha256WithRSAEncryption
3a:ff:a9:03:d9:fb:5d:26:50:d4:cd:c3:f2:ce:e0:23:32:92:
4d:55:71:02:63:b6:c1:71:06:5f:63:b8:b4:9a:23:3c:0a:c4:
24:38:08:23:6b:ad:1c:b3:e4:9e:4c:13:4a:e9:b9:c3:8a:f2:
65:d9:c7:c6:76:b7:8b:30:77:e9:00:d8:8d:85:13:9b:1d:14:
8e:3b:85:6d:f2:6f:56:2e:09:c9:88:83:99:65:4c:45:73:8f:
aa:d0:f4:d2:a8:ec:42:b4:62:5f:db:c7:89:ea:d9:cb:05:7a:
bb:3e:7e:7a:99:77:29:f4:bf:b6:a3:84:0d:c9:69:56:51:e6:
b1:8b:5a:24:fe:34:70:96:b2:96:cc:57:a1:54:9d:2b:79:ec:
4d:89:9c:7d:a4:a7:3e:12:c0:5e:e0:8c:12:2f:b9:87:c1:cc:
d4:fd:9d:d1:b7:14:15:19:6b:e6:7a:6e:0b:aa:c1:f0:54:51:
8d:3b:73:5d:a6:6a:b2:83:b1:a3:7b:ba:31:02:2c:23:9e:97:
9f:f8:35:85:dc:1c:4b:1b:db:23:29:19:f3:f1:4c:c6:05:23:
a7:88:d4:02:eb:09:0f:46:42:b9:6f:2e:12:3c:37:36:14:df:
f6:c7:da:0a:98:1c:8a:41:2c:6d:53:d4:15:9c:86:fd:e7:5d:
92:7d:0c:81
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQoJi57IwkM80O1afNv5TbtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0YmJhZWI3MGIzZjFkMDY3MTYzNThhZDlhMmVjZmVmN2Qy
MTI2ZmIwHhcNMjUwMTAyMTc1MjU4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzY2VhMWU2N2QyNWMyMmIxNGY4NDk0ZGU1OGY1M2M4ZTkyYmZiYzA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtcQ+Fmdv63t+AZBm1wgUlRd0DsM7
wqITfM3u8e0xMxVCwmRWNIJslVNqbYbPpVHiPY7z4eIka4Avmlf5sjGY48dQSIXN
3vHhKT+NThWWIjzABCkANph/O/NajsgukXfFd6BUC6+Cg6TKUKdxSCPqVn4N8cmJ
TvE24hqebl73ot9U77D73mCDTht6MA3Dj6ns4f6QmxyBWVZkAIWFqpWFmvh40pkc
ymR35F7O3qSbj356JeCrdzTAcTm0KT75QydRyfrXfwdvDkJh23izqLtCzLRB9ABB
2siSPkKZy/raAbv/+Pw5vi7XZN4IiBWLp5YIKZdaK/KB6i1XcjCx0GyqbwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDzqHmfSXCKxT4SU3lj1PI6Sv7wHMB8GA1UdIwQY
MBaAFIS7rrcLPx0GcWNYrZouz+99ISb7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaEx1dXR3c19IUVp4WTFpdG1pN1A3MzBoSnZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9iNjdlYjctZTQ5Ni00YzMxLTlmNjct
OTc5MDJkOGE3ZmE2LzEvUE9vZVo5SmNJckZQaEpUZVdQVThqcEtfdkFjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni9iNjdlYjctZTQ5Ni00YzMxLTlmNjctOTc5MDJkOGE3ZmE2
LzEvaEx1dXR3c19IUVp4WTFpdG1pN1A3MzBoSnZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCubMYMA0G
CSqGSIb3DQEBCwUAA4IBAQA6/6kD2ftdJlDUzcPyzuAjMpJNVXECY7bBcQZfY7i0
miM8CsQkOAgja60cs+SeTBNK6bnDivJl2cfGdreLMHfpANiNhRObHRSOO4Vt8m9W
LgnJiIOZZUxFc4+q0PTSqOxCtGJf28eJ6tnLBXq7Pn56mXcp9L+2o4QNyWlWUeax
i1ok/jRwlrKWzFehVJ0reexNiZx9pKc+EsBe4IwSL7mHwczU/Z3RtxQVGWvmem4L
qsHwVFGNO3Ndpmqyg7Gje7oxAiwjnpef+DWF3BxLG9sjKRnz8UzGBSOniNQC6wkP
RkK5by4SPDc2FN/2x9oKmByKQSxtU9QVnIb9512SfQyB
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:00:16 2025 by rpki-client